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MEMORANDUM  FOR  DIRECTOR,  DEFENSE  FINANCE  AND  ACCOUNTING 

SERVICE 


SUBJECT:  Audit  of  Defaise  Finance  and  Accounting  Service  Work  on  the  Air  Force 
FY  1994  Financial  Statements  (Project  No.  4FD-2015) 


Introduction 

This  report  is  being  provided  to  management  for  review.  The  audit  was 
conducted  as  part  of  the  audits  required  by  the  Chief  Financial  Officers  Act 
of  1990  (the  CFO  Act).  The  CFO  Act  requires  the  Inspector  Gener^ 
(IG),  DoD,  to  audit  the  Vandal  statemaits  of  DoD  activities.  As  authorized  in 
the  CFO  Act,  the  IG,  DoD,  requested  that  the  Air  Force  Audit  Agency  (AFAA) 
perform  the  audit  of  the  FY  1994  financial  statements  of  the  Air  Force  General 
Fund.  To  assist  the  AFAA,  the  IG,  DoD,  performed  audit  work  at  the  Defense 
Finance  and  Accounting  Service  (DFAS)  Denver  Center.  The  DFAS  Denver 
Center  maintains  Air  Force  department-level  records  and  is  responsible  for 
preparation  of  the  financial  statements  from  data  submitted  by  Air  Force  field 
activities. 

The  DFAS  Denver  Center  relies  on  several  accounting  and  nonaccounting 
systems  to  obtain  data  for  preparation  of  the  Air  Force  financial  statements. 
More  than  $329.6  billion  in  assets  and  iqiproximately  $74.5  billion  of  available 
appropriations  were  reported  on  the  Air  Force's  financial  statements  for 
FY  1994.  AFAA  issued  a  disclaimer  of  opinion  on  the  overall  financial 
statements  for  FYs  1992,  1993,  and  1994  because  of  inadequate  accounting 
systems  and  uncertainties  in  the  amounts  rqxirted. 


Audit  Results 

The  DFAS  Denver  Center  could  not  prepare  reliable  FY  1994  financial 
statements  that  presented  fairly  the  financim  position  or  results  of  operations  of 
the  Air  Force.  As  a  result,  AFAA  was  unable  to  render  an  audit  opinion.  In 
addition  to  the  reasons  dted  by  AFAA  for  its  inability  to  render  an  opinion  on 
the  financial  statements,  unreliable  nonfinancial  systems  and  input  that  was  not 
validated  by  Air  Force  activities  before  they  submitted  it  to  the  DFAS  Driver 
Center  contributed  to  uncertainties  concerning  account  balances  in  the  financial 
statements.  An  upcoming  volume  of  tiie  DoD  Financial  Management 
Regi^tion  will  delineate  the  responsibilities  of  the  DoD  Components  and 
DFAS,  and  will  resolve  questions  concerning  responsibilities  for  data  accuracy 
and  validation.  Prompt  implementation  of  the  new  guidance  is  an  essential  step 
toward  an  improved  audit  opinion  on  Air  Force  financial  statements  based  on 
reliable  information.  Because  management  had  corrective  actions  in  progress  at 
the  end  of  the  audit,  this  report  contains  no  recommendations.  However,  we 
did  identify  materud  internal  control  weaknesses,  as  discussed  below. 


The  DFAS  Denver  Carter  did  not  adequately  monitor  security  of  the  Merged 
AccountabiUty  and  Fund  Reporting  (MAFR)  System.  A  designated  manager 
was  not  assigned  to  monitor  system  security;  periodic  man^emrat  reviews  were 
not  to  determine  whether  individuals  had  a  continued  n^  for  access;  and 
no  written  proc^ures  existed  to  assign  duties  and  responsibihties  for  oversight 
of  system  security. 


The  MAFR  System  did  not  maintain  an  adequate  audit  trail  for  attries 
originating  at  the  DFAS  Denver  Center.  Without  an  audit  trail,  management 
coidd  not  identity  all  the  adjustments  to  the  MAFR  System  data  base,  and  could 
not  determine  whether  adequate  support  existed  for  each  adjustment  and  whether 
^justments  were  correctly  made. 


The  DFAS  Denver  Coiter  has  taken  actions  to  correct  these  deficiencies.  In 
January  1995,  the  new  MAFR  System  Division  Chief  assumed  the  duties  of 
MAFR  System  Security  Manager,  and  a  review  is  under  way  to  conmm  that 
individuals'  duties  require  the  level  of  access  granted.  Work  on  the  Defense 
Cash  Management  System  (DCMS)  has  also  begun,  and  Ae  plamimg  ph^e  has 
been  completed.  DFAS  Doiver  Cento:  is  waiting  for  authorization  of  additional 
funds  to  start  the  implementation  phase.  DCMS  should  correct  accounting 
deficiencies,  increase  productivity,  and  reduce  the  costs  of  the  work  force  and 
systems  involved  in  cash  management.  The  DCMS  project  mcludes  an  audit 
trail  for  transactions  originating  at  the  DFAS  Denver  Center. 


Objectives 

The  overall  objective  of  the  audit  was  to  determine  whether  the  DFAS  Denver 
Center  prepared  fair,  complete,  accurate,  and  reliable  FY  1994  financial 
statements  for  the  Air  Force.  We  revised  our  stated  audit  objective  to  more 
clearly  reflect  the  scope  of  work  performed.  We  provided  the  resulte  of  our 
evaluation  to  AFAA  for  use  in  formulating  its  opinion  on  the  Air  Force 
financial  statements.  AFAA  issued  disclaimers  of  opinion  on  me  financial 
statements  because  the  accounting  systems  were  unable  to  provide  accur^e 
account  balances.  Because  of  AFAA’s  opinions  and  our  knowledge  of  the 
condition  of  the  systems,  we  limited  our  review  to  the  Statement  of  Fm^cm 
Position  and  Statemoit  of  Opoations.  As  part  of  the  au^t,  we  reiaewed  and 
tested  the  methods  that  the  DFAS  Denver  Center  used  to  consohdate  and 
prepare  the  Air  Force  financial  statements.  We  also  ev^uated  toe  DFAS 
Denver  Center's  compliance  with  existing  laws  and  regulations  and  with  toe 
management  control  program  as  it  applied  to  toe  audit  objectives. 


Scope  and  Methodology 

We  performed  this  financial-related  audit  at  toe  DFAS  Draver  Center  during  toe 
peri^  August  1994  through  February  1995.  9ur  audit  a^is^  AFAA  by 
supporting  its  disclaimer  of  opinion  on  toe  Air  Force  s  FY  1994  financial 
st^ments.  To  assess  compliance  with  DoD  accounting  pohcies.  General 
Accounting  Office  (GAO)  standards,  and  Office  of  ^agement  and  Budget 
guidance,  we  reviewed  documents  siqiporting  toe  FY  1994  miancial  statements. 
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Those  documents  included  the  Air  Force’s 

"ReDort  on  Budget  foecution"  (Accounting  Rqwrt  M-1176),  and  ^justments 
that  me  DFAS  Doivw  Coito:  made  to  the  statements.  T^e  data  to  support 
those  documents  were  computer-processed;  in  prior  audits,  we  had  detenimed 
that  the  were  unreliable  because  the  additional  reconciliations  needed  tor  a 
nonintegrated  system  were  not  performed.  DFAS  Iws  mtiated  wrrective 
actions  by  contracting  for  the  Interim  Migratory  Accountog  System.  However 
function^  changes  to  the  systems,  which  will  improve  the  quality  of  dga,  w^ 
not  occur  for  several  years.  We  found  weaknesses  m  toe  MAFR  System  s 
controls.  We  aisf>  evaluated  selected  line-item  amounts  and  related  ^ustments 
on  toe  Statemrait  of  FinancM  Position  and  toe  Statemait  of  Operations, 
including  associated  footnotes.  We  did  not  use  statistical  samplmg  proc^ures. 
Our  autot  was  primarily  performed  at  toe  DFAS  Denver  Center;  we  also  met 
with  or  contacted  other  organizations  that  affect  toe  financial  statements.  Those 
organizations  are  listed  in  Enclosure  3  . 

Timitatinns.  We  evaluated  toe  DFAS  Denver  Center's  procures  for 
Dreoaring  toe  Statement  of  Financial  Position  and  toe  Statement  of  Operations. 
Bemuse  of  known  weaknesses,  we  did  not  review  toe  procedures  used  by  toe 
DFAS  Dwiver  Center  to  prqiare  toe  Statemait  of  Cash  Flows  or  toe  Statement 
of  Budget  and  Actual  ^penses.  In  addition,  we  did  not  evaluate  toe  accuracy 
of  data  provided  by  Air  Force  field  activities,  which  were  mcluded  in  toe 
AFAA  review. 

The  objective  of  our  audit  was  to  evaluate  whether  toe  DFAS  Denver  Center 
fulfilled  its  responsibilities  for  preparing  toe  Air  Force  financial  statements. 
Accordingly,  we  did  not  render  an  opinion  on  toe  financial  statements.  ^AA 
issued  a  of  opinion  on  toe  Air  Force  financial  statements  m  its  Report 

No.  94053001,  "Opinion  on  Fiscal  Year  1994  Air  Force  Consolidated  Fmancial 
Statements,"  March  1,  1995. 

Auditing  Standards.  We  performed  toe  audit  in  accordance  with  auditing 
standards  established  by  toe  Comptroller  Genwal,  as  impleinented  by  the 
IG  DoD  and  in  accordance  with  Office  of  Managemwit  and  Budget  guidance. 
Accordingly,  we  included  such  tests  of  internal  controls  and  management  s 
compliance  wto  laws  and  regulations  as  we  considered  necessary. 


Internal  Management  Control  Program 

DoD  Directive  5010.38,  "Internal  Management  Control  l^ogram,"  Ap^  14, 
1987  requires  DoD  organizations  to  maintain  a  system  of  internal  controls  Md 
to  periodically  review  and  report  on  toe  adequacy  of  those  internal  controls. 
Oui^eview  of  toe  DFAS  Denver  Center's  internal  management  control  progr^ 
evalua^  the  adequacy  of  ttie  internal  controls  over  the  MAFR  System  and  me 
DFAS  DenvCT  Center's  self-evaluation  of  those  internal  controls.  We 
specifically  reviewed  toe  internal  controls  over  MAFR  System  security  and 
audit  trails. 


We  idaitified  material  internal  control  weaknesses  in  toe  MAFR  System  as 
by  DoD  Directive  5010.38.  Both  toe  MAFR  System's  secunty 


weaknesses  and  audit  tndl  problems  are  material  weakness^  because  of  the  cash 
resources  involved  and  the  large  amount  of  funds  reported  in  the  MAFR  system. 
We  did  not  mate  recommendations  regarding  these  weaknesses  because  the 
corrective  actions  already  taken  on  system  purity,  and  the  solution  that  the 
DCMS  project  should  provide  on  the  audit  trail  issue,  should  conwt  fte 
weaknesses.  The  DFAS  Denver  Center  was  aware  of  these  weaknesses,  but  had 
not  reported  them  to  higher  managemrat  because  the  MAFR  System  had  already 
been  reported  as  a  noncompliant  system  in  the  Annual  Statement  of  Assurance. 
With  improved  oversight  of  MAFR  System  security  and  resolution  of  audit  trail 
weaknesses,  managers,  evaluators,  and  auditors  can  ensure  that  transactions  are 
properly  accumulated  and  correctly  classified,  coded,  and  recorded  ^  ^ 
affected  accounts.  A  copy  of  this  report  vnU  be  provided  to  the  semor  DFAS 
official  responsible  for  internal  controls. 


Prior  Audits  and  Other  Reviews 

Since  1988,  the  Air  Force's  financial  statements  have  been  the  subject  of  reports 
issued  by  the  GAO,  the  AFAA,  and  the  IG,  DoD.  Enclosure  1  discusses  two 
opinion  reports  from  the  GAO,  three  opinion  reports  from  the  AFAA,  and  two 
rdated  rejwrts  from  the  IG,  DoD.  The  AFAA  performed  36  audits  m  support 
of  its  3  opinion  reports. 


Background 

MAFR  System  Security.  The  MAFR  System  is  a  DFAS  Denver  Center 
ac^oiintinp  and  reporting  system  used  to  control  and  consolidate  Defense 
Accounting  Offices'  and  other  Government  agencies'  payment  and  collection 
transactions  citing  Air  Force  funds.  During  FY  1994,  the  MAFR  System 
processed  $134  billion  in  disbursements,  $34  billion  in  reimbursements,  and 
$18.5  billion  in  receipts.  In  FY  1994,  the  MAFR  System's  payment  and 
collection  data  primanly  affected  two  accounts  on  the  financial  statements: 
"Expenses,"  reported  at  $55.1  bilUon,  and  "Cash  and  Other  Monetary  Assets 
(a  nonentity  asset),  report  at  $139.9  miUion. 

The  "GAO  Policy  and  Procedures  Manual  for  Guidance  of  Federal  Agaicies," 
Title  2  "Accounting,"  states  that  access  to  rewurces  and  records  should  be 
limited  to  authorized  individuals,  and  accountability  for  the  custody  aM  ute 
resources  should  be  assigned  and  maintained.  DoD  Guideline  7740. 1-G,  ADP 
fritemal  Control  Guideline,"  July  1988,  states  that  users  should  be  gra^ 
access  only  to  the  resources  and  information  required  for  their  duties.  The 
DFAS  Denver  Center  DFAS-DE/AD  Instruction  No.  5200.28,  "Automatic  Itota 
Processing  Computer  Security  Standards,"  February  15,  1994,  states  that 
responsibiUty  for  the  DFAS  Denver  Center's  MAFR  System  computer  resources 
includes  aut»«"arir  data  processing  equipment,  software,  data,  computer  time, 
computer  programs,  personnel,  and  supplies.  The  purity  manager  is 
responsible  for  ?wigning  and  controlling  users.  The  functions  performed  by  an 
employee  should  determine  the  level  of  access  to  computer  resources. 
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Database  security  for  the  MAFR  System  is  controUed  by  assigning  each  user  a 
profile,  which  defines  the  files  that  can  be  accessed  and  changes  that  c^  be 
made.  In  this  report,  access  is  defined  as  the  ability  to  change,  add,  or  delete 
information  in  the  data  base.  A  manager's  authorization  of  access  indicates  that 
the  manager  is  aware  of  the  file's  cont^ts  and  that  access  is  necessary  to 
perform  assigned  duties.  Granting  access  permits  an  individual  to  change  the 
MAFR  System  data  base  and  resulting  rqwrts. 

MAFR  System  Audit  Trails.  DoD  Financial  Management 
Regulation  7000. 14-R,  Volume  1,  May  1993,  states: 

Audit  trails  permit  tracing  transactions  through  a  system.  Audit  trails 
allow  auditors  or  evaluators  to  ^isure  transactions  are  properly 
and  correctly  classified,  coded  and  recorded  in  all 
afiected  accounts.  Audit  trails  should  allow  a  transaction  to  be  traced 
from  initiation  through  processing  to  final  reports.  .  .  A  key  test  of 
the  adequacy  of  an  audit  trail  is  whether  tracing  tiie  transaction 
forward  from  the  source  or  back  from  the  result  will  permit 
verification  of  the  amount  recorded  or  reported. 

DFAS-DE/AD  Instruction  No.  5200.28  states,  "Under  no  circumstances  will 
update  or  higher  access  be  grated  person^y  to  a  user  accessing  production 
data  sets  unless  a  complete  audit  trail  is  provided. " 

The  MAFR  System  data  base  is  composed  of  data  from  field  locations  where 
cash  transactions  occur  and  data  from  accounting  adjustments.  Generally, 
base-level  transactions  provide  information  necessary  to  idaitify  source  records. 
However,  because  of  the  diverse  nature  of  dq)artmental  accounting  adjustments 
and  edit  overrides,  creating  audit  trails  for  departmental  adjustments  is 
complicated.  As  discussed  below,  a  number  of  MAFR  System  limitations  dso 
imp^e  the  creation  of  an  audit  tr^  for  departmental  adjustments.  Limitotions 
m^  cans**  loss  of  the  identity  of  the  user  inputting  the  adjustment;  consolidation 
of  individual  adjustments;  and  failure  to  identify  the  basis  for  the  adjustment. 


Discussion 

MAFR  System  Security.  The  DFAS  Denver  Center  did  not  adequately 
monitor  MAFR  System  security.  This  condition  existed  because  the  DFAS 
Denver  Center: 

o  did  not  designate  a  security  manager  for  the  MAFR  System; 

o  did  not  perform  periodic  reviews  to  determine  whether  individuals  had 
a  continued  need  for  access;  and 

o  lacked  written  procedures  for  system  security  oversight. 

Individuals  could  retain  access  that  they  no  longer  needed,  thus  retaining  the 
ability  to  update,  change,  or  modify  MAFR  System  files.  Proper  monitoring 
redu(4s  the  risk  of  unauthorized  access  and  system  use,  and  loss  of 
accountability  and  control  over  Government  data. 
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Sl6curity  Manflgcr's  Rote.  The  MAFR  System  did  not 
4^^^ipnatftH  security  manager  to  control  and  monitor  overall  access  to  the  MAFR 
System  data  base.  The  Director  of  Departmental  Accounting  had  not  dde§a^ 
s^uritv  management  responsibilities  to  the  Cash  Accoun^^ty  Dmaon 
Manager.  Instead,  each  branch  and  section  chief  in  the  Cash  Accountability 
Division  was  responsible  for  controlling  and  monitoring  his  or  her  employees 
access  to  the  data  base.  A  higher  level  of  oversight  was  needed  to  effectively 
control  and  monitor  access  to  Ae  MAFR  System. 


Periodic  Reviews.  Managers  reviewed  only  an  employee's  imbal 
request  for  access  or  requests  made  when  an  employee's  status  changed.  Ator 
a^s  was  granted,  periodic  reviews  were  not  conduct^  to  determine  wheteer 
individuals  had  a  continued  need  to  access  and  modify  the  data  base.  We 
identified  two  individuals  granted  access  to  MAFR  files  who  ^d  not  n^ 
access.  They  could  modify  the  data  base  without  mqmtormg  by  their 
supervisors.  When  management  reviews  access  lists  period^ly,  ms  ensures 
that  only  individuals  with  valid  needs  have  access  to  the  MAFR  data  base. 

Operating  Instructions.  The  MAFR  System  did  not  have  an  Operating 
Instruction  (01)  for  system  security  oversight.  An  01  had  not  been  prepared 
because  the  DFAS  Denver  Center  did  not  designate  a  system  secunty  meager 
to  evaluate  security  requirements.  The  DFAS  Denver  Center  n^s  an  OI  to 
describe  MAFR  System  profiles  in  the  data  base,  dal^ts  in  Ae  data  base,  and 
criteria  used  to  grant  access  to  the  profiles.  Descriptions  of  the  elements  ot 
each  profile  were  combined  with  other  system  information.  When  profile 
descriptions  are  combined,  a  security  manager  cannot  quickly  learn  the  contents 
of  the  datasets  for  which  an  individual  is  requesting  or  mamtaimng  acews.  By 
keeping  profile  information  separate  and  having  management  confirm  that  each 
user  needs  access  to  perform  his  or  her  duties,  the  chances  of  management 
inappropriately  granting  access  vill  be  reduced. 

Corrective  Actions  Taken.  As  a  r^ult  of  our  audit,  the  DFAS  Denver 
Center  is  working  to  correct  these  deficiencies.  In  Janua^  1995,  the  iww 
MAFR  System  Manager  was  designated  MAFR  System  Securify  Manager,  as 
duties  include  oversight  of  MAFR  System  security.  A  review  is  currently  under 
way  to  confirm  that  each  profile  contains  the  appropriate  MAFR  System  ^s 
and  that  only  those  employees  with  appropriate  needs  are  granted  access,  ae 
MAFR  System  Security  Manager  is  also  assessing  alternatives  for  consolidating 
procedures  and  OIs. 


MAFR  Audit  TraUs 

Audit  Trails.  The  MAFR  System  does  not  maintain  audit  trails  or  transa(^n 
histories  for  transactions  originating  at  the  DFAS  .Denver  Cen^.  Tnis 
condition  existed  because  at  the  time  the  system  was  mstalled,  audit  trails  for 
DFAS  Denver  Center  adjustments  were  not  considered  necessary.  As  a  result, 
we  could  not  determine  which  transactions  were  initiated  by  DFAS  Denver 
Center  personnel  who  had  MAFR  System  access;  whether  the  ^justinrats  were 
adequately  supported;  and  whether  they  were  properly  classified,  coded,  and 
recorded  m  each  affected  account. 
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Managment  Benefits.  The  term  "audit  trails"  is  e3q)lained  in  DoD 
Financial  Management  Regulation  7000. 14-R.  The  term  is  a  misnomer,  smce 
the  audit  trail  is  not  solely  for  auditors'  use;  it  benefits  management  on  a 
day-to-day  basis.  With  an  adequate  audit  trail,  managers  can  be  assured  that  the 
]ijnminari7/»<i  data  they  use  to  make  critical  decisions  are  supported  by  documente 
that  can  be  located  and  tested  for  accuracy.  Management  should  encourage  the 
creation  and  maintenance  of  adequate  audit  trails  as  part  of  a  sound  management 
control  environment. 

Corrective  Actions  Planned.  The  MAFR  System  has  been  designated 
an  interim  migratory  system.  Modifications  to  the  MAFR  System  are  being 
included  in  the  DCMS.  The  new  system  will  include  the  necessary  audit  trails 
for  transactions  originating  at  the  DFAS  Denver  Center. 


Conclusion 

We  discussed  the  audit  results  with  officials  at  the  DFAS  Denver  Center.  No 
r«»rnmmftnriatinns  were  necessary  because,  as  the  result  of  our  audit,  needM 
improvements  to  MAFR  System  security  are  being  implemented,  and  audit  trails 
have  been  included  in  the  DCMS  project  that  is  under  way.  However,  no 
specific  timetable  for  corrective  action  was  discussed.  Changes  in  these  areas 
will  result  in  improved  system  security  and  provide  the  information  needed  to 
identify  and  examine  transactions  that  originate  at  the  DFAS  Denver  Center. 


Management  Comments 

In  the  draft  report,  we  gave  DFAS  management  the  opportunity  to  comment  and 
requested  that  they  provide  completion  dates  for  the  two  issues  we  identified. 
DFAS  provided  the  completion  dates  in  a  memorandum  dated  June  20,  1995. 
A  DFAS  Denver  Center  Operating  Instruction  on  MAFR  System  security  will 
be  completed  by  September  30,  1995.  To  correct  the  lack  of  an  audit 
DFAS  Denver  Center  will  implement  the  DCMS  during  January  1998. 
Management  had  no  other  comments  on  the  audit  report.  Management's 
comments  are  at  Enclosure  2  of  this  report. 


Audit  Response 

Management's  comments  are  responsive  to  the  two  issues  we  identified  in  the 
audit  report. 
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We  appreciate  the  courtesies  extended  to  the  audit  staff.  Questions  about  this 
audit  should  be  directed  to  Mr.  David  C.  Funk,  Audit  Program  Director,  at 
(303)  676-7445  (DSN  926-7445),  or  Mr.  Thomas  J.  Winter,  Audit  Project 
Manager,  at  (703)604-9100  pSK  664-9100).  We  will  provide  a  formal 
briefing  on  the  results  of  the  audit,  if  desired.  Enclosure  4  lists  the  report 
distribution. 


Assistant  Inspector  General 
for  Auditing 


Enclosures 
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Prior  Audits  and  Other  Reviews 


The  GAO  issued  reports  on  the  Air  Force  financial  statements  for  FYs  1988  and 
1989.  The  AFAA  also  performed  39  audits  related  to  issuing  opinions  on  the 
Air  Force's  general  fund  financial  statements  for  FYs  1992,  1993,  and  1994. 
This  is  the  diird  IG,  DoD,  audit  in  support  of  the  AFAA  opinion  reports  on 
Air  Force  general  fiinds.  The  audits  listed  below  apply  specifically  to  this 
report. 

GAO  Audits.  GAO  Report  No.  AFMD-90-23  (OSD  Case  No.  8193-A), 
"Air  Force  Does  Not  Effectively  Account  for  Billions  of  Dollars  of  Resources," 
was  issued  in  February  1990.  The  principal  findings  were  that  financial  systems 
did  not  provide  reliable  financial  data,  basic  internal  control  wraknesses  existed, 
the  full  costs  of  weapon  systems  were  not  identified,  and  inventory  systems  did 
not  provide  accurate  data.  The  Under  Secretary  of  Defense  (Comptroller) 
concurred  with  the  report's  26  recommendations.  Recommendations  were  made 
for  the  Air  Force  to  make  better  use  of  existing  financial  information,  develop 
more  accurate  financial  information,  perform  reconciliations  and  document 
adjustments,  account  for  the  costs  of  weapon  systems,  achieve  financi^ 
management  of  inventories,  and  develop  a  new  accounting  system. 

GAO  Report  No.  AFMD-92-12  (OSD  Case  No.  8376-L),  "Aggressive  Actions 
Needed  for  Air  Force  to  Meet  Objectives  of  the  CFO  Act,"  was  issued  in 
Febniary  1992.  The  report's  principal  findings  were  that  financial  systems  were 
nonintegrated  and  generated  unreliable  information;  the  reported  costs  of 
weapon  systems  were  unreliable;  accounting  and  controls  over  Air  Logistics 
Command  inventories  were  inadequate;  internal  accounting  controls  were 
inadequate;  and  short-term  actions  were  ne«ied  to  improve  the  quality  of 
financial  data  and  allow  completion  of  a  financial  statement  audit.  GAO  Report 
No.  AFMD-92-12  reaffirmed  the  26  recommendations  in  the  GAO's 
February  1990  report,  and  made  additional  recommendations  to  improve 
management's  accountability,  strengthen  internal  controls,  improve  the  quality 
of  financial  information,  and  assist  the  Air  Force  in  meeting  the  objectives  of 
the  CFO  Act. 

IG,  DoD,  Perspective.  _  To  date,  the  Air  Force  has  made  limited 
progress  in  correctog  deficiencies  in  its  financial  management  systems.  The 
reason  for  the  Air  Force's  limited  progress  is  that  DoD  has  emphasized 
long-term  efforts  to  improve  and  standardize  its  financial  management 
operations,  and  the  benefits  of  those  efforts  will  not  be  realized  for  several 
years.  The  DFAS  Denver  Center  has  expended  significant  resources  to  improve 
financial  reporting.  For  example,  in  FY  1992,  the  DFAS  Denver  Center 
trained  more  than  400  Air  Force  personnel  on  the  requirements  of  the  CFO  Act, 
and  developed  a  pamphlet  for  self-paced  training  on  the  general  ledger.  During 
FY  1993,  the  DFAS  Denver  Center  worked  with  DFAS  Headquarters  to 
improve  the  DFAS  Denver  Center's  financial  management  system.  The  DFAS 
Denver  Center  plans  to  pay  contractors  more  than  $100  million  to  develop  an 
Interim  Migratory  Accounting  System,  which  should  correct  deficiencies 
mentioned  in  CFO  audit  reports  and  improve  other  weaknesses.  The  Interim 
Migratory  Accounting  System  is  currently  in  the  conceptual  design  phase. 
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IG,  DoD,  Audits.  IG,  DoD,  Audit  Rqx)it  No.  94-073,  "Defense  Finance  and 
Accounting  Service  Work  on  the  Air  Force  FY  1992  Financial  Statements," 
March  31,  1994,  reported  that  the  DFAS  Daiver  Center  did  not  prepare 
complete,  accurate,  and  reliable  FY  1992  financial  statements  for  the  Air  Force. 
Most  of  Ae  financial  information  came  from  nonintegrated  management  systems 
that  were  not  designed  as  accounting  systems.  As  a  result,  the  financial 
statements  were  unreliable,  and  the  conmtion  was  expected  to  continue  for 
several  years.  As  expected,  the  AFAA  has  continued  to  issue  disclaimers  of 
opinion  for  FYs  1992  through  1994. 

IG,  DoD,  Audit  Report  No  95-067,  "Defense  Finance  and  Accounting  Service 
Work  on  the  Air  Force  FY  1993  Financial  Statements,"  December  30,  1994, 
reported  that  the  Air  Force  financial  statements  had  problems  similar  to  those 
reported  in  the  FY  1992  rqport.  Two  areas  were  the  inappropriate  reporting  of 
Accounts  Receivable  and  Accounts  Payable,  and  the  lack  of  reconciliations  with 
U.S.  Treasu^  Clearing  Accounts.  The  DFAS  comments  were  responsive,  and 
DFAS  is  taking  corrective  action. 

AFAA  Audits.  The  AFAA  issued  opinions  on  the  consolidated  Air  Force 
financial  statements  for  FYs  1992,  1993,  and  1994.  In  support  of  the 
consolidated  financial  statement  audits,  the  AFAA  also  conducted  20  audits  on 
FY  1992  general  fund  data,  11  audits  on  FY  1993  general  fimd  ^ta,  and 
5  audits  on  FY  1994  general  fund  data.  Those  audits  were  performed 
concurrently  with  our  audits. 

In  its  final  report  on  Project  No.  94053001,  "Opinion  on  Fiscal  Year  1994 
Air  Force  Consolidated  Financial  Statements,"  March  1,  1995,  the  AFAA 
issued  a  disclaimer  of  opinion  on  the  Air  Force's  consolidated  financial 
statements  for  FY  1994.  The  disclaimer  was  issued  because  of  material 
uncertainties  related  to  the  reasonableness  of  amounts  reported  in  the  financial 
statements;  the  uncertainties  were  caused  by  the  inadequate  accounting  systems. 
AFAA  also  found  that  the  conditions  reported  in  FY  1992  still  exist.  Those 
conditions  are  the: 

o  lack  of  a  transaction-driven  general  ledger; 

o  inability  of  the  accounting  systems  to  produce  auditable  financial 
statements; 

o  failure  to  use  acquisition  costs  for  all  assets; 
o  inaccurate  reporting  of  equipment,  inventories,  and  real  property; 
o  questionable  account  balances  for  disbursements  and  collections;  and 
o  underestimation  of  contingent  liabilities. 
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Defense  Finance  and  Accounting  Service 
Conunents 


DEFENSE  FINANCE  AND  ACCOUNTING  SERVICE 

ttji  jcrrciisoN  OAvit  highway 
AiiuNGTOH»  VA  aat4G-sa»t 


JUN  2  0 


DFA8-HQ/AD 


MMORANDUM  FOR  DIRECTOR,  FIKAMCZAL  MAHAGEMEHT  DIRECTORATE, 
IMSFECTOR  GEHERAL,  DOD 

SUBJECT:  Preparation  ot  Rasponaa  to  DoO(XO)  Draft  Report, 

*Dafanaa  Finance  and  Accounting  Service  Work  on  tbe 
Air  Force  FT  1994  Financial  Statenente,”  (Project 
NO.  4FD-2019) 

As  requested  in  your  Msorandua  dated  June  1,  199S,  subject 
as  above,  folloving  are  the  estisated  eospletion  dates  related  ' 
to  the  corrective  actions  identified  in  the  subject  draft 
report: 

•  The  estisated  date  for  the  Defense  Finance  and  Accounting 
Service  to  cosplete  the  Operating  Instruction  (01)  for 
Merged  Accountability  and  Fund  Reporting  (NAFR)  systea 
security  is  September  30,  1995. 

•  The  Departmental  Cash  Management  System  (DCN8)  has  an 
implementation  schedule  of  24  months  plus  an  additional 
six  months  test  period  for  a  total  of  30  months. 
Implementation  of  DCNS  is  tentatively  scheduled  for 
January  199S. 
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My  point  of  contact  is  Ms.  Melinda  G.  Graves.  She  may  be 
reached  at  (703)  607-197S/1979  or  DSN  327-157S/1579. 


Edvard  AT^anis 

Deputy  Director  for  Business  Funds 
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Organizations  Visited  or  Contacted 


Department  of  the  Air  Force 

Assistant  Secretary  of  Ae  Air  Force  (Financial  Management  and  Comptroller), 
Washington,  DC 

Auditor  Gener^,  Department  of  Air  Force,  Arlington,  VA 

Financial  and  Support  Audits  Directorate,  March  Air  Force  Base,  CA 


Defense  Agencies 

Defense  Finance  and  Accounting  Service,  Arlington,  VA 

Defense  Finance  and  Accounting  Service  Denver  Center,  Denver,  CO 


Non-Defense  Organizations 

Office  of  Management  and  Budget,  Washington,  DC 
Federal  Accounting  Standards  Advisory  Board,  Washington,  DC 
General  Accounting  Office,  Denver  Region,  Denver,  CO 
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Report  Distribution 


Office  of  the  Secretary  of  Defense 

Under  Secret^  of  Defense  (Comptroller) 

Deputy  Chief  Financial  Officer 
Director,  Accounting  Policy 
Director,  Management  Improvement 
Deputy  Comptroller  (Prograi^Budget) 

Assistant  to  the  Secret^  of  Defense  ^blic  Affairs) 
Director,  Defense  Logistics  Studies  Information  Exchange 


Department  of  the  Army 

Auditor  General,  Department  of  the  Army 

Department  of  the  Navy 

Assistant  Secretary  of  the  Navy  (Financial  Management  and  Comptroller) 
Auditor  General,  Department  of  the  Navy 


Department  of  the  Air  Force 

Secretary  of  the  Air  Force 

Assistant  Secreta^  of  the  Air  Force  (Financial  Management  and  Comptroller) 
Director  (Audit  Liaison  and  Follow-up) 

Auditor  General,  Department  of  the  Air  Force 
Financial  and  Support  Audits  Directorate 
Acquisition  and  Logistics  Audit  Directorate 


Other  Defense  Organizations 

Director,  Defense  Contract  Audit  Agency 
Director,  Defense  Finance  and  Accounting  Service 

Director,  Customer  Service  and  Performance  Assessment  Deputate 
Director,  Defense  Finance  and  Accounting  Service  Denver  Center 
Internal  Review  Office 
Director,  Defense  Logistics  Agency 
Director,  National  Security  Agency 
Inspector  General,  Nations  Security  Agency 
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Non-Defense  Organizations 

Office  of  Management  and  Budget 

Technical  Information  Center,  National  Security  and  International  Affairs  Division, 
U.S.  General  Accounting  Office 

Chairman  and  Ranking  Minority  Member  of  Each  of  the  Following  Congressional 
Committees  and  Subcommittees; 

Senate  Committee  on  Appropriations 

Senate  Subcommittee  on  Defense,  Committee  on  Appropriations 
Senate  Committee  on  Armed  Services 
Senate  Committee  on  Governmental  Affairs 
House  Committee  on  Appropriations 

House  Subcommittee  on  National  Security,  Committee  on  Appropriations 
House  Committee  on  Government  Reform  and  Oversight 
House  Subcommittee  on  National  Security,  International  Affairs,  and  Criminal 
Justice,  Committee  on  Government  Reform  and  Oversight 
House  Committee  on  National  Security 
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Audit  Team  Members 


Russell  A.  Rau 
David  C.  Funk 
Thomas  J.  Winter 
Harold  J.  Simmons 
Jewell  F.  Levy 
Ben  J.  Meade 
Donna  L.  Meroney 
Edwin  L.  Wilkinson 
Susanne  B.  Allen 


IS 


INTERNET  DOCUMENT  INFORMATION  FORM 


A .  Report  Title:  Defense  Finance  and  Accounting  Service  Work  on  the  Air 
Force  FY  1994  Finance  Statements 


B.  DATE  Report  Downloaded  From  the  Internet:  01/09/99 


C.  Report’s  Point  of  Contact:  (Name,  Organization,  Address,  Office 
Symbol,  &  Ph  #):  OAIG-AUD  (ATTN:  AFTS  Audit  Suggestions) 

Inspector  General,  Department  of  Defense 
400  Army  Navy  Drive  (Room  801) 

Arlington,  VA  22202-2884 


D.  Currently  Applicable  Classification  Level:  Unclassified 

E.  Distribution  Statement  A:  Approved  for  Public  Release 

F.  The  foregoing  information  was  compiled  and  provided  by: 

DTIC-OCA,  Initials: _ VM _ Preparation  Date  01/09/99 


The  foregoing  information  should  exactiy  correspond  to  the  Titie,  Report  Number,  and  the  Date  on 
the  accompanying  report  document.  If  there  are  mismatches,  or  other  questions,  contact  the 
above  OCA  Representative  for  resolution. 


